<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
  
<!-- Mirrored from bos.asmhackers.net/docs/filesystems/ntfs/attrlist.html by HTTrack Website Copier/3.x [XR&CO'2013], Tue, 07 Oct 2014 11:26:07 GMT -->
<head>
    <title>NTFS Documentation: Attribute List Attribute</title>
  </head>

  <body>
      <h1><a href="index-2.html#NTFS" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/index.html#NTFS">NTFS</a> Documentation: <a href="attribute.html" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html">Attribute</a> List <a href="attribute.html" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html">Attribute</a></h1>

      <h2>Interest</h2>
      The attribute list is used in case where a <a href="glossary.html#File" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/glossary.html#File">file</a> need <a href="FILE.html#extension_record" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/FILE.html#extension_record">extension FILE record</a>s in the <a href="MFT.html" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/MFT.html">MFT</a> to be fully described, in order to find any <a href="attribute.html" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html">file attribute</a> of this <b><a href="glossary.html#File" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/glossary.html#File">file</a></b>. This <a href="attribute.html" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html">file attribute</a> may be <a href="attribute.html#non_resident" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#non_resident">non-resident</a> because its <a href="attribute.html#stream" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#stream">stream</a> is likely to grow.
      <p>

      <h2>Layout of the <a href="attribute.html#stream" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#stream">stream</a></h2>
      The <a href="attribute.html#stream" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#stream">stream</a> of this attribute is a list of records. Each record describes a <a href="attribute.html" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html">file attribute</a>, and has the following layout:
      <p>

      <table border=2 cellspacing=2 cellpadding=2>
	<tr bgcolor="#E0E0E0">
	  <th>Offset to the beginning of the record</th>
          <th>Length</th>
          <th>Description</th>
        </tr>
        <tr>
          <th>0</th>
          <th>4</th>
          <th><a href="attribute.html#type" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#type">Type</a></th>
        </tr>
        <tr>
          <th>4</th>
          <th>2</th>
          <th>Record length</th>
        </tr>
        <tr>
          <th>6</th>
          <th>1</th>
          <th>L=<a href="attribute.html#name" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#name">Name</a> size</th>
        </tr>
        <tr>
          <th></th>
          <th></th>
          <th></th>
        </tr>
        <tr>
          <th>8</th>
          <th>8</th>
          <th><a href="attrlist.html#start_VCN" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attrlist.html#start_VCN">Starting VCN</a></th>
        </tr>
        <tr>
          <th>10</th>
          <th>8</th>
          <th><a href="fileref.html" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/fileref.html">File reference</a> to the <a href="FILE.html" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/FILE.html">FILE record</a> containing the <a href="attribute.html#header_part" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#header_part">header part of the attribute</a></th>
        </tr>
        <tr>
          <th>18</th>
          <th>2</th>
          <th><a href="attrlist.html#attribute_id" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attrlist.html#attribute_id">Identificator</a></th>
        </tr>
        <tr>
          <th>1A</th>
          <th>2*L</th>
          <th>Name in <a href="glossary.html#Unicode" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/glossary.html#Unicode">Unicode</a></th>
        </tr>
      </table>
      <p>

      <dl>
        <dt><a name="start_VCN">Starting <a href="attribute.html#VCN" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#VCN">VCN</a></a>
	  <dd>A copy of the <a href="attribute.html#field_10" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#field_10">field at offset 10 in the header part of a non-resident attribute</a>, or 00 00 00 00 00 00 00 00 for a <a href="attribute.html#resident" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#resident">resident file attribute</a>.
	  <p>
        <dt><a name="attribute_id">Identificator</a>
	  <dd>A copy of the <a href="attribute.html#field_E" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#field_E">field at offset E in the attribute header part</a>.
	  <p>
      </dl>

      <em>Note</em>:
      <ul>
	 <li>The Attribute List <a href="attribute.html" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html">attribute</a> doesn't self-reference.
	 <li>The records are ordered by increasing order of the <a href="attribute.html#type" tppabs="http://www.via.ecp.fr/~regis/ntfs/new/attribute.html#type">attribute type</a>.
      </ul>
      <p>

      <hr>
      <address><a href="mailto:regis@via.ecp.fr">Regis Duchesne</a> at <a href="javascript:if(confirm('http://www.via.ecp.fr/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.via.ecp.fr/'" tppabs="http://www.via.ecp.fr/">VIA</a>, <a href="javascript:if(confirm('http://www.ecp.fr/  \n\nThis file was not retrieved by Teleport Pro, because it is addressed on a domain or path outside the boundaries set for its Starting Address.  \n\nDo you want to open it from the server?'))window.location='http://www.ecp.fr/'" tppabs="http://www.ecp.fr/">ECP</a>, France</address>
<!-- Created: Sat Dec  7 20:46:09 MET 1996 -->
<!-- hhmts start -->
Last modified: Mon Feb 15 07:21:52 PST 1999
<!-- hhmts end -->
  </body>

<!-- Mirrored from bos.asmhackers.net/docs/filesystems/ntfs/attrlist.html by HTTrack Website Copier/3.x [XR&CO'2013], Tue, 07 Oct 2014 11:26:07 GMT -->
</html>
